agentforce-d360-analyze
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to the Salesforce Data Cloud Query REST API to fetch session audit logs, including interactions, messages, and model gateway requests. These downloads are performed using Python's standard library and target endpoints associated with the user's authenticated Salesforce instance.
- [COMMAND_EXECUTION]: The Python scripts invoke the Salesforce CLI (
sf) to retrieve authentication tokens and organization details. Specifically, it uses commands likesf org displayandsf org auth show-access-tokento securely handle session credentials. All command invocations use argument lists rather than shell strings, mitigating command injection risks.
Audit Metadata